https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:18:07.521253+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-138258 EUVD-2026-138258 2026-10-16T20:18:07.524164+00:00 EUVD-2026-138258 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6497 fkie_cve-2007-6497 2026-10-16T20:18:07.524215+00:00

Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a credit amount and increase a discount via an UpdateUser action to Accounts/AccountActions.asp with modified UserName, FullName, CreditLimit, and DefaultDiscount parameters, a related issue to CVE-2005-2219.

 https://cve.radiocsirt.org/vuln/ghsa-c8xf-q675-96cv GHSA-c8xf-q675-96cv 2026-10-16T20:18:07.524258+00:00

Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a credit amount and increase a discount via an UpdateUser action to Accounts/AccountActions.asp with modified UserName, FullName, CreditLimit, and DefaultDiscount parameters, a related issue to CVE-2005-2219.

 https://cve.radiocsirt.org/vuln/gsd-2007-6497 gsd-2007-6497 2026-10-16T20:18:07.524277+00:00 gsd-2007-6497